# WARNING: Cache entry deserialization failed, entry ignored
ERROR: THESE PACKAGES DO NOT MATCH THE HASHES FROM THE REQUIREMENTS FILE.

- **ID:** `python/pip-cache-http-error-304-loop`
- **Domain:** python
- **Category:** data_error
- **Verification:** ai_generated
- **Fix Rate:** 80%

## Root Cause

pip's HTTP cache holds a corrupted or stale artifact whose hash no longer matches the pinned --hash in requirements. Often after a partial download or index change.

## Version Compatibility

| Version | Status | Introduced | Deprecated |
|---------|--------|------------|------------|
| 3.8+ | active | — | — |

## Workarounds

1. **** (92% success)
   ```
   pip cache purge
pip install --no-cache-dir -r requirements.txt
   ```
2. **** (85% success)
   ```
   pip download --no-deps --require-hashes -r requirements.txt -d /tmp/dl
pip hash /tmp/dl/foo-1.2.3-py3-none-any.whl  # update requirements
   ```

## Dead Ends

- **** — Disables supply-chain integrity checking entirely, defeating the purpose and exposing you to tampered packages. (85% fail)
- **** — You no longer know the artifact is authentic; you've just accepted whatever was downloaded. (90% fail)
